$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: wkLkvMkTwMXqcnQP8BC5DmwiEJc3nvkC5dIxB4Oy9xs= Subject key identifier: 36:C8:7A:91:73:8C:59:6E:D0:51:BF:8C:C5:79:AB:D4:65:56:A6:87 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 01A1DEA72F138429DF562A60AA88B12B0EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1B22 Signing time: Sun 15 Nov 2026 10:01:00 +0000 Manifest this update: Sun 15 Nov 2026 10:01:00 +0000 Manifest next update: Mon 16 Nov 2026 10:01:00 +0000 Files and hashes: 1: E8mOohDcmePz8wTu6FwWLzSrlS8.roa (hash: GTMclphGCva6x2txMNdZeOKZzdKFQq0vbNyBSMSOHFk=) 2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=) 3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=) 4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=) 5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=) 6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=) 7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=) 8: Rm3PPV17RGS6ncoj1AlUUc-ntcY.roa (hash: nXf6jErEDRYthigF4Rk+n6rBZLzxa/vorux+nkxF4+I=) 9: TT4xF4Dyb738kO2dN8JItJaMoWE.roa (hash: dg4Eqectcr3c1QNLlz5RcTz95oUMXRrTMjKfCdqKF0M=) 10: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 0vdEk39M/a9wMjmCfQ4YA3vF7ltsQWdliF4tiq7jEA4=) 12: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=) 13: t_VzMrElQM7EfgjnVco9rRqMoq0.roa (hash: ki0GoMyt8CSD+Q5qZeH7m3PWjGNpMJmjKxcYfhAjZ74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:2f:13:84:29:df:56:2a:60:aa:88:b1:2b:0e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Nov 15 10:01:00 2026 GMT Not After : Nov 16 10:01:00 2026 GMT Subject: CN=36c87a91738c596ed051bf8cc579abd46556a687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:7b:49:71:5d:39:59:55:6e:23:b0:9f:ec: 33:78:4b:7b:24:9c:97:ae:b6:c7:4f:f0:3a:d9:6a: 8d:8e:05:f6:70:2b:05:a6:79:53:ec:f9:f6:ee:a3: c7:fd:3e:98:ee:c6:6d:8a:ad:d3:7a:77:e6:a7:20: a6:26:9e:9b:d7:2b:bc:7f:22:0e:17:be:cd:49:c0: 90:3a:10:cb:a4:8e:9a:a3:ac:3f:b8:be:d5:a0:30: da:db:60:68:34:22:76:26:3d:9f:0b:da:26:1d:01: 0f:a7:f5:42:b3:f2:41:38:43:d8:7d:69:be:72:e1: 7f:a7:d3:4a:c6:8a:01:a3:da:72:59:72:fa:f9:4f: 86:ff:5d:2f:a1:24:dd:3f:2f:ca:98:1a:67:9d:d1: b1:a2:0e:ed:fc:ea:28:4f:a5:41:e6:94:ad:cb:d4: be:9b:23:ba:38:4e:d9:f0:fc:37:1a:07:c0:ae:65: 30:b7:08:77:e1:24:82:da:25:35:52:20:a9:8c:1a: 11:88:3f:bb:e9:6e:5a:2a:5d:d6:19:03:b5:14:b5: 01:21:db:a3:ca:aa:47:4f:21:39:42:44:f5:80:10: 70:fd:1e:f8:d9:80:59:ea:b2:cc:62:70:5a:d4:42: c4:37:a5:b0:24:a0:f7:b8:94:4d:4e:93:2d:dd:f4: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:7A:91:73:8C:59:6E:D0:51:BF:8C:C5:79:AB:D4:65:56:A6:87 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:59:b2:40:16:3a:12:52:5f:c7:d8:1c:0e:40:6a:24:30:74: 33:8c:cc:2a:8a:01:d1:44:d2:37:0c:16:21:e8:49:fe:70:28: 2b:5b:3a:c9:3d:57:37:46:6b:37:e6:e9:76:29:1d:35:cd:7b: 1e:ff:6f:1a:6b:69:bd:5c:0e:40:b3:c7:f0:aa:8f:3f:bc:e4: 93:5e:0a:2f:43:5c:3f:c4:c8:41:07:3c:ac:44:af:15:3b:a3: fb:15:39:45:67:0a:a2:ec:26:1f:99:94:f7:83:bf:b4:49:24: 2b:7e:68:22:7f:7e:4d:2c:9f:0e:73:a1:b4:97:65:d1:62:f2: 68:0a:56:1a:ce:49:5b:ab:a2:96:93:8b:de:b3:ae:be:86:c7: 08:b2:1e:09:25:fc:4e:03:9d:c3:31:78:45:7a:da:4d:2c:7a: 2f:9f:10:31:64:58:3c:b1:08:a7:36:7b:da:54:7e:8b:ab:99: fc:f1:5e:1e:21:e3:89:65:92:43:33:a2:b2:29:61:d4:57:b0: 65:24:65:06:10:a0:66:3e:42:f7:99:54:10:5b:b1:ed:85:7d: 0e:bd:87:4b:68:94:a3:5c:36:79:07:82:59:38:48:ad:7c:de: ec:9a:ed:1a:b9:dd:1d:fb:af:2e:65:8c:8e:f9:4e:fb:6b:0c: 77:e9:60:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHepy8ThCnfVipgqoixKw69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYxMTE1MTAwMTAwWhcNMjYxMTE2MTAwMTAwWjAzMTEwLwYDVQQD EygzNmM4N2E5MTczOGM1OTZlZDA1MWJmOGNjNTc5YWJkNDY1NTZhNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup17SXFdOVlVbiOwn+wzeEt7JJyX rrbHT/A62WqNjgX2cCsFpnlT7Pn27qPH/T6Y7sZtiq3TenfmpyCmJp6b1yu8fyIO F77NScCQOhDLpI6ao6w/uL7VoDDa22BoNCJ2Jj2fC9omHQEPp/VCs/JBOEPYfWm+ cuF/p9NKxooBo9pyWXL6+U+G/10voSTdPy/KmBpnndGxog7t/OooT6VB5pSty9S+ myO6OE7Z8Pw3GgfArmUwtwh34SSC2iU1UiCpjBoRiD+76W5aKl3WGQO1FLUBIduj yqpHTyE5QkT1gBBw/R742YBZ6rLMYnBa1ELEN6WwJKD3uJRNTpMt3fS2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbIepFzjFlu0FG/jMV5q9RlVqaHMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1myQBY6 ElJfx9gcDkBqJDB0M4zMKooB0UTSNwwWIehJ/nAoK1s6yT1XN0ZrN+bpdikdNc17 Hv9vGmtpvVwOQLPH8KqPP7zkk14KL0NcP8TIQQc8rESvFTuj+xU5RWcKouwmH5mU 94O/tEkkK35oIn9+TSyfDnOhtJdl0WLyaApWGs5JW6uilpOL3rOuvobHCLIeCSX8 TgOdwzF4RXraTSx6L58QMWRYPLEIpzZ72lR+i6uZ/PFeHiHjiWWSQzOisilh1Few ZSRlBhCgZj5C95lUEFux7YV9Dr2HS2iUo1w2eQeCWThIrXze7JrtGrndHfuvLmWM jvlO+2sMd+lgiA== -----END CERTIFICATE-----Generated at Sun Nov 15 20:49:35 2026 by rpki-client